8,437 results · Feed
-
Medium max 4.9USN-7376-2 1 CVE
mariadb vulnerability
USN-7376-1 fixed vulnerabilities in MariaDB. This update provides the corresponding updates for Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. Original advisory details: A security issue was discovered in MariaDB and this update includes a new upstream MariaDB versio…
first Mar 31, 2025 -
High max 7.5USN-7372-1 1 CVE
varnish vulnerability
Martin van Kervel Smedshammer discovered that Varnish did not properly sanitize certain HTTP headers. A remote attacker could possibly use this issue to perform a cross-site request forgery (CSRF) attack.
first Mar 26, 2025 -
High max 7.5USN-7370-1 3 CVEs
smartdns vulnerabilities
It was discovered that SmartDNS did not correctly align certain objects in memory, leading to undefined behaviour. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. (CV…
first Mar 25, 2025 -
High max 7.3USN-7377-1 1 CVE
smarty vulnerability
It was discovered that Smarty did not properly sanitize template file names. An attacker could possibly use this issue to cause Smarty to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 27, 2025 -
Critical max 9.8USN-7371-1 4 CVEs
freerdp2 vulnerabilities
Evgeny Legerov discovered that FreeRDP incorrectly handled certain memory operations. If a user were tricked into connecting to a malicious server, a remote attacker could possibly use this issue to cause FreeRDP to crash, resulting in a denial of service. (C…
first Mar 25, 2025 -
High max 7.5USN-7351-1 6 CVEs
resteasy vulnerabilities
Nikos Papadopoulos discovered that RESTEasy improperly handled URL encoding when certain errors occur. An attacker could possibly use this issue to modify the app's behavior for other users through the network. (CVE-2020-10688) Mirko Selber discovered that RE…
first Mar 13, 2025 -
High max 7.0USN-7359-1 2 CVEs
valkey vulnerabilities
It was discovered that Valkey did not properly handle memory cleanup. An attacker could possibly use this issue to execute arbitrary code. (CVE-2024-46981) It was discovered that Valkey did not properly handle resource access permissions. An authenticated att…
first Mar 19, 2025 -
Medium max 6.5USN-7362-1 1 CVE
golang-github-cli-go-gh-v2 vulnerability
It was discovered that go-gh incorrectly handled authentication tokens. An attacker could possibly use this issue to leak authentication tokens to the wrong host. (CVE-2024-53859)
first Mar 20, 2025 -
Critical max 9.8USN-7341-1 6 CVEs
freerdp2 vulnerabilities
Evgeny Legerov discovered that FreeRDP incorrectly handled certain memory operations. If a user were tricked into connecting to a malicious server, a remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly…
first Mar 11, 2025 -
High max 8.7USN-7355-1 4 CVEs
restrictedpython vulnerabilities
Nakul Choudhary and Robert Xiao discovered that RestrictedPython did not properly sanitize certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-37271) Ab…
first Mar 18, 2025 -
High max 7.0USN-7345-1 1 CVE
dotnet8, dotnet9 vulnerability
Zahid TOKAT discovered that .NET suffered from a weak authentication vulnerability. An attacker could possibly use this issue to elevate privileges.
first Mar 11, 2025 -
Medium max 5.0USN-7335-1 1 CVE
python-django vulnerability
It was discovered that Django incorrectly handled text wrapping. An attacker could possibly use this issue to cause a denial of service.
first Mar 6, 2025 -
High max 7.5USN-7427-1 1 CVE
dotnet8, dotnet9 vulnerability
James Newton-King discovered that .NET did not properly limit resource allocation when handling certain HTTP/3 requests. An attacker could possibly use this issue to cause a denial of service.
first Apr 8, 2025 -
Critical max 9.8USN-7334-1 8 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary c…
first Mar 6, 2025 -
High max 8.1USN-7315-2 1 CVE
postgresql-10 vulnerability
USN-7315-1 fixed a vulnerability in PostgreSQL. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: Stephen Fewer discovered that PostgreSQL incorrectly handled quoting syntax in certain scenarios. A remote attacker …
first Apr 30, 2025 -
High max 7.0USN-7313-1 1 CVE
erlang vulnerability
It was discovered that Erlang incorrectly handled SFTP packet sizes. A remote attacker could possibly use this issue to cause Erlang to consume resources, resulting in a denial of service.
first Mar 3, 2025 -
Medium max 6.6USN-7091-2 4 CVEs
ruby2.7 vulnerabilities
USN-7091-1 fixed several vulnerabilities in Ruby. This update provides the corresponding update for CVE-2024-35176, CVE-2024-41123, CVE-2024-41946 and CVE-2024-49761 for ruby2.7 in Ubuntu 20.04 LTS. Original advisory details: It was discovered that Ruby incor…
first Nov 21, 2024 -
Medium max 6.6USN-7091-1 5 CVEs
ruby3.0, ruby3.2, ruby3.3 vulnerabilities
It was discovered that Ruby incorrectly handled parsing of an XML document that has specific XML characters in an attribute value using REXML gem. An attacker could use this issue to cause Ruby to crash, resulting in a denial of service. This issue only affec…
first Nov 5, 2024 -
Medium max 6.5USN-7224-1 3 CVEs
cyrus-imapd vulnerabilities
It was discovered that non-authentication-related HTTP requests could be interpreted in an authentication context by a Cyrus IMAP Server when multiple requests arrived over the same connection. An unauthenticated attacker could possibly use this issue to perf…
first Jan 22, 2025 -
Medium max 6.5USN-7204-1 21 CVEs
neomutt vulnerabilities
Jeriko One discovered that NeoMutt incorrectly handled certain IMAP and POP3 responses. An attacker could possibly use this issue to cause NeoMutt to crash, resulting in a denial of service, or the execution of arbitrary code. This issue only affected Ubuntu …
first Jan 15, 2025 -
Critical max 9.8USN-7157-1 5 CVEs
php7.4, php8.1, php8.3 vulnerabilities
It was discovered that PHP incorrectly handled certain inputs when processed with convert.quoted-printable decode filters. An attacker could possibly use this issue to expose sensitive information or cause a crash. (CVE-2024-11233) It was discovered that PHP …
first Dec 13, 2024 -
Critical max 9.6USN-7274-1 3 CVEs
atril vulnerabilities
It was discovered that Atril incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service or to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2019-1010006) Andy Nguyen discovered that …
first Feb 18, 2025 -
Medium max 6.8USN-7270-1 2 CVEs
openssh vulnerabilities
It was discovered that the OpenSSH client incorrectly handled the non-default VerifyHostKeyDNS option. If that option were enabled, an attacker could possibly impersonate a server by completely bypassing the server identity check. (CVE-2025-26465) It was disc…
first Feb 18, 2025 -
High max 7.5USN-7250-1 5 CVEs
netdata vulnerabilities
It was discovered that Netdata incorrectly handled parsing JSON input, which could lead to a JSON injection. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-18836) It was discovered tha…
first Feb 3, 2025 -
UnscoredUSN-7164-1 3 CVEs
imagemagick vulnerability
It was discovered that ImageMagick incorrectly handled certain malformed files. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly exploit this to cause a denial of service.
first Dec 17, 2024 -
High max 7.5USN-7247-1 5 CVEs
opencv vulnerabilities
It was discovered that OpenCV did not properly manage certain XML data, leading to a NULL pointer dereference. If a user were tricked into loading a specially crafted file, a remote attacker could possibly use this issue to make OpenCV crash, resulting in a d…
first Feb 3, 2025 -
Critical max 9.8USN-7136-1 2 CVEs
python-django vulnerabilities
jiangniao discovered that Django incorrectly handled the API to strip tags. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service. (CVE-2024-53907) Seokchan Yoon discovered that Django incorrectly…
first Dec 4, 2024 -
High max 7.5USN-7047-1 4 CVEs
knot-resolver vulnerabilities
Vladimír Čunát discovered that Knot Resolver incorrectly handled input during DNSSEC validation. A remote attacker could possibly use this issue to bypass certain validations. (CVE-2019-10190) Vladimír Čunát discovered that Knot Resolver incorrectly handled i…
first Oct 1, 2024 -
High max 7.5USN-7319-1 5 CVEs
cmark-gfm vulnerabilities
It was discovered that cmark-gfm's autolink extension did not correctly handle parsing large inputs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-39209) It wa…
first Mar 3, 2025 -
High max 8.1USN-7315-1 1 CVE
postgresql-12, postgresql-14, postgresql-16 vulnerability
Stephen Fewer discovered that PostgreSQL incorrectly handled quoting syntax in certain scenarios. A remote attacker could possibly use this issue to perform SQL injection attacks.
first Mar 3, 2025 -
Medium max 5.5USN-7312-1 1 CVE
opennds vulnerability
It was discovered that openNDS did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
first Mar 3, 2025 -
UnscoredUSN-7307-1 1 CVE
libxmltok vulnerability
Tim Boddy discovered that Expat, contained within the xmltok library, did not properly handle memory reallocation when processing XML files. If a user or application linked against Expat were tricked into opening a crafted XML file, an attacker could cause a …
first Feb 26, 2025 -
High max 7.8USN-7299-1 8 CVEs
xorg-server, xwayland vulnerabilities
Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker could use these issues to cause the X Server to crash, leading to a denial of service, or possibly execute arbitrary code.
first Feb 25, 2025 -
High max 7.5USN-7292-1 2 CVEs
Several security issues were fixed in Dropbear
Manfred Kaiser discovered that Dropbear through 2020.81 does not properly check the available authentication methods in the client-side SSH code. An attacker could use this vulnerability to gain unauthorized access to remote systems. (CVE-2021-36369) Fabian B…
first Feb 25, 2025 -
Medium max 6.1USN-7287-1 1 CVE
libcap2 vulnerability
Tianjia Zhang discovered the libcap2 PAM module pam_cap incorrectly handled parsing group names in the configuration file. This could result in certain users being granted capabilities, contrary to expectations.
first Feb 24, 2025 -
Medium max 5.1USN-7286-1 1 CVE
iniparser vulnerability
It was discovered that iniParser incorrectly handled certain files. An attacker could possibly use this issue to cause iniParser to crash, resulting in a denial of service.
first Feb 24, 2025 -
Medium max 4.3USN-7285-2 1 CVE
nginx vulnerability
USN-7285-1 fixed vulnerabilities in nginx. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that nginx incorrectly handled when multiple server blocks are configured to share the same IP address…
first Apr 1, 2025 -
Medium max 5.3USN-7281-1 1 CVE
gnutls28 vulnerability
Bing Shi discovered that GnuTLS incorrectly handled decoding certain DER-encoded certificates. A remote attacker could possibly use this issue to cause GnuTLS to consume resources, leading to a denial of service.
first Feb 20, 2025 -
Medium max 6.3USN-7280-1 1 CVE
python3.10, python3.12, python3.8 vulnerability
It was discovered that Python incorrectly handled parsing domain names that included square brackets. A remote attacker could possibly use this issue to perform a Server-Side Request Forgery (SSRF) attack.
first Feb 20, 2025 -
Medium max 4.3USN-7285-1 1 CVE
nginx vulnerability
It was discovered that nginx incorrectly handled when multiple server blocks are configured to share the same IP address and port. An attacker could use this issue to use session resumption to bypass client certificate authentication requirements on these ser…
first Feb 24, 2025